What is CVE-2021-22519?

CVE-2021-22519 is a critical-severity vulnerability in Microfocus Sitescope. CVSS score: 9.8/10. Published 2021-05-28.

How severe is CVE-2021-22519?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Microfocus Sitescope

CVE-2021-22519

Execute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60), 2019.02(11.70), 2019.05(11.80), 2019.08(11.90), 2019.11(11.91), 2020.05(11.92), 2020.10(11.93). The vulnerability could allow remote attackers to execute arbitrary code on affected installations of SiteScope.

EPSS: 0.020 (78.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Microfocus Sitescope — versions 11.40, 11.41, 11.50
N/a Sitescope — versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60), 2019.02(11.70), 2019.05(11.80), 2019.08(11.90), 2019.11(11.91), 2020.05(11.92), 2020.10(11.93)

References

security@opentext.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2021-22519?: CVE-2021-22519 is a critical-severity vulnerability in Microfocus Sitescope. CVSS score: 9.8/10. Published 2021-05-28.
How severe is CVE-2021-22519?: Critical severity. CVSS v3 base score is 9.8 out of 10.